|
239601
|
Install syft (pinned) and generate SPDX SBOM
|
36509
|
8
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033315
|
1793033315
|
Edit
Delete
|
|
239602
|
Install cosign (pinned)
|
36509
|
9
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033315
|
1793033315
|
Edit
Delete
|
|
239603
|
Sign image when COSIGN_PRIVATE_KEY is provided (ot Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip)...
|
36509
|
10
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033315
|
1793033315
|
Edit
Delete
|
|
239604
|
Upload image evidence
|
36509
|
11
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033315
|
1793033315
|
Edit
Delete
|
|
239605
|
Candidate tag (real run attempt, computed per job)
|
36510
|
0
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239606
|
Run https://github.com/actions/checkout@v4
|
36510
|
1
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239607
|
Enable pnpm
|
36510
|
2
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239608
|
Run https://github.com/actions/setup-node@v4
|
36510
|
3
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239609
|
Download static evidence
|
36510
|
4
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239610
|
Download runtime evidence
|
36510
|
5
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239611
|
Download identity evidence
|
36510
|
6
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239612
|
Download port-conformance evidence
|
36510
|
7
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239613
|
Verify candidate (per-report sourceSha / dirty / s Verify candidate (per-report sourceSha / dirty / status / digest; missing → ineligible)...
|
36510
|
8
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239614
|
Download image and full SBOM evidence for the same Download image and full SBOM evidence for the same candidate...
|
36510
|
9
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239615
|
Release Manifest (known facts, status partial unti Release Manifest (known facts, status partial until all deliverables exist)...
|
36510
|
10
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239616
|
Upload candidate evidence
|
36510
|
11
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239617
|
Propagate upstream results and candidate eligibili Propagate upstream results and candidate eligibility...
|
36510
|
12
|
116
|
3
|
0
|
0
|
0
|
0
|
1793033317
|
1793033347
|
Edit
Delete
|
|
239618
|
Candidate tag (real run attempt, computed per job)
|
36511
|
0
|
116
|
2
|
26
|
3
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239619
|
Run https://github.com/actions/checkout@v4
|
36511
|
1
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239620
|
Enable pnpm
|
36511
|
2
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239621
|
Run https://github.com/actions/setup-node@v4
|
36511
|
3
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239622
|
Private registry auth (temporary userconfig)
|
36511
|
4
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239623
|
Install locked governance tools
|
36511
|
5
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239624
|
Test image release credential preflight (synthetic Test image release credential preflight (synthetic credentials only)...
|
36511
|
6
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239625
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
36511
|
7
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239626
|
Governance checks (exact engineering package; publ Governance checks (exact engineering package; public contracts dependencies)...
|
36511
|
8
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239627
|
Pack publishable packages (contracts + governance; Pack publishable packages (contracts + governance; no publish)...
|
36511
|
9
|
116
|
4
|
29
|
0
|
1793033540
|
1793033540
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239628
|
Upload package tarballs
|
36511
|
10
|
116
|
2
|
29
|
3
|
1793033540
|
1793033541
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239629
|
Upload public static evidence
|
36511
|
11
|
116
|
1
|
32
|
1
|
1793033541
|
1793033541
|
1793033463
|
1793033541
|
Edit
Delete
|
|
239630
|
Candidate tag (real run attempt, computed per job)
|
36512
|
0
|
116
|
2
|
23
|
3
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239631
|
Run https://github.com/actions/checkout@v4
|
36512
|
1
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239632
|
Enable pnpm
|
36512
|
2
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239633
|
Run https://github.com/actions/setup-node@v4
|
36512
|
3
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239634
|
Private registry auth (temporary userconfig)
|
36512
|
4
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239635
|
Install locked governance tools
|
36512
|
5
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239636
|
Install runtime workspace (frozen lockfile)
|
36512
|
6
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239637
|
Install contracts dependencies (public npm only, f Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check)...
|
36512
|
7
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239638
|
Generate Prisma clients
|
36512
|
8
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239639
|
Build runtime modules (fixture suites evaluate mig Build runtime modules (fixture suites evaluate migrated rules from dist)...
|
36512
|
9
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239640
|
Repo-root governance gate
|
36512
|
10
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239641
|
Source tree must stay clean apart from latest repo Source tree must stay clean apart from latest reports (no tracked .npmrc mutation)...
|
36512
|
11
|
116
|
4
|
26
|
0
|
1793033545
|
1793033545
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239642
|
Upload static evidence
|
36512
|
12
|
116
|
1
|
26
|
3
|
1793033545
|
1793033546
|
1793033541
|
1793033546
|
Edit
Delete
|
|
239643
|
Run https://github.com/actions/checkout@v4
|
36513
|
0
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239644
|
Enable pnpm
|
36513
|
1
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239645
|
Run https://github.com/actions/setup-node@v4
|
36513
|
2
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239646
|
Private registry auth (temporary userconfig)
|
36513
|
3
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239647
|
Install locked governance tools
|
36513
|
4
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239648
|
Install runtime workspace (frozen lockfile)
|
36513
|
5
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239649
|
Generate clients for authority module unit imports Generate clients for authority module unit imports (no database)...
|
36513
|
6
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|
|
239650
|
Module / package unit tests
|
36513
|
7
|
116
|
4
|
0
|
0
|
0
|
0
|
1793033548
|
1793033548
|
Edit
Delete
|